CVE-2016-7268

CWE-125 — Out-of-bounds Read4 documents4 sources
Severity
7.1HIGH
EPSS
10.9%
top 6.59%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Microsoft OfficeMicrosoft Office WEB AppsMicrosoft Sharepoint Server+2 more
Timeline
PublishedDec 20
Latest updateMay 14

Description

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word for Mac 2011, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allow remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via a crafted document, aka "Microsoft Office Information Disclosure Vulnerability."

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:HExploitability: 1.8 | Impact: 5.2

Affected Packages4 packages

▶NVDmicrosoft/word2007, 2011+1

🔴Vulnerability Details

2
GHSA
GHSA-rqp3-x5r3-8m58: Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word for Mac 2011, Word Automation Services on Sh↗2022-05-14
▶
CVEList
CVE-2016-7268: Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word for Mac 2011, Word Automation Services on Sh↗2016-12-20
▶

📋Vendor Advisories

1
Microsoft
Microsoft Office Information Disclosure Vulnerability↗2016-12-13
▶
CVE-2016-7268 (HIGH CVSS 7.1) | Microsoft Word 2007 SP3 | cvebase.io